A friend of mine is a web development service provider and a competitor of his, raised a question mark on Wordpress, which was being deployed for a specific project. The question raised was "Wordpress is not secure enough for commercial needs!". I am attaching my friends short reply to that question below:
---
Hi <customer>
I respect the expertise and experience of <my competitor>, however I cannot ignore the expertise, time and experience that IT teams working for big brands like CNN, The New York Times, Ford, NASA, Sony Playstation, Harvard and many more put in to choose the right platform for their content. For a complete list please, check the following links:
Almost 75% of blogs on the internet use Wordpress as a publishing platform. You can see more data on the following link
And when we say blogs, we just dont mean a horde of personal blogs - but immense blogs handling millions of users per day like - Tech Crunch, MakeUseOf.com, Giga OM Networks, amongst many others.
Other than that, if you wanna see how many Wordpress has been downloaded click on following link
No software is perfect. Vulnerabilities and security loophole exist everywhere. Even companies like Google have been hacked, for more details click on the following link
But, Wordpress is being developed by an active community consisting of thousands of developers. What this means is that the turnaround time for new features and vulnerability fixes is very short compared to any other commercial cms, usually averaging around a day only.
<customer>, At the end of the day the final call is yours. I still stand with my support for Wordpress.
---
What do you guys think - How Secure is Wordpress? Leave a comment!